7:26 a.m.
I'm a noob with Volatility, so please be patient. I am working through some samples I
found online. I've identified where I think malware was injected into a process by
following this tutorial:
http://volatility-labs.blogspot.com/2012/10/reverse-engineering-poison-ivys…
My question:
once in volshell I get many errors in my python code. How do I enter a "tab" in
volshell? Since Python is so dependent on indentation, I cannot follow the rest of the
tutorial as I cannot get past the "for addr in addrs" line..
Thanks.
9:22 a.m.
No problem :-)
You should just be able to use the "tab" key to input tabs. You don't
put the dots ( "." ), those will just populate on their own. So
basically, the "if" statement is tabbed in and everything below that
is double-tabbed in as well it seems. then after you put in the last
line, you should just be able to hit "enter" twice and you should get
output.
Other than that, what were the errors you received?
On Tue, Dec 11, 2012 at 7:26 AM, Kathy Simm <kathys39(a)hotmail.com> wrote:
I'm a noob with Volatility, so please be patient.
I am working through some
samples I found online. I've identified where I think malware was injected
into a process by following this tutorial:
http://volatility-labs.blogspot.com/2012/10/reverse-engineering-poison-ivys…
My question:
once in volshell I get many errors in my python code. How do I enter a
"tab" in volshell? Since Python is so dependent on indentation, I cannot
follow the rest of the tutorial as I cannot get past the "for addr in addrs"
line..
Thanks.
_______________________________________________
Vol-users mailing list
Vol-users(a)volatilityfoundation.org
http://lists.volatilityfoundation.org/mailman/listinfo/vol-users
--
PGP Fingerprint: 2E87 17A1 EC10 1E3E 11D3 64C2 196B 2AB5 27A4 AC92
4356
days inactive
4356
days old
vol-users@lists.volatilityfoundation.org
1 comments
2 participants
participants (2)
-
Jamie Levy -
Kathy Simm